[c-nsp] VPN clients on Cisco ASA

[Randy]

Gert,
 
1) DPD on site-to-site vpn tunnels: I have used regularly and without issues.(dpd b/w cisco and 3com wouldn't work unless it has been fixed recently)
2) DPD with cisco VPN clients-to-ASA: I have had issues with.(on older versions of vpn clients).
Regards,
./Randy


--- On Wed, 7/29/09, Gert Doering <gert at greenie.muc.de> wrote:


From: Gert Doering <gert at greenie.muc.de>
Subject: Re: [c-nsp] VPN clients on Cisco ASA
To: "Randy" <randy_94108 at yahoo.com>
Cc: " Kiran @ London SMCOddiraju" <Kiran.Oddiraju at cbre.com>, cisco-nsp at puck.nether.net
Date: Wednesday, July 29, 2009, 1:20 AM


Hi,

On Tue, Jul 28, 2009 at 02:12:31PM -0700, Randy wrote:
> 4) Also disable DPD(no isakmp keepalive. 

Why?

I haven't experienced any issues with DPD yet, but I regularily see people
recommending to turn off DPD, or blaim other issues (like "rekeying doesn't
work") on DPD - so I wonder what I'm missing here.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de